Author: joeyh Date: 2011-07-26 21:14:40 +0000 (Tue, 26 Jul 2011) New Revision: 17005 Modified: data/CVE/list Log: automatic update Modified: data/CVE/list ==================================================================--- data/CVE/list 2011-07-26 21:09:46 UTC (rev 17004) +++ data/CVE/list 2011-07-26 21:14:40 UTC (rev 17005) @@ -336,6 +336,7 @@ NOTE: Only supported behind an authenticated HTTP zone CVE-2011-2719 [PMASA-2011-12 phpMyAdmin Possible superglobal and local variables manipulation in swekey authentication.] RESERVED + {DSA-2286-1} - phpmyadmin 4:3.4.3.2-1 (low) [lenny] - phpmyadmin <not-affected> (Vulnerable code not present) CVE-2011-2718 [PMASA-2011-11 phpMyAdmin Local file inclusion vulnerability and code execution.] @@ -543,6 +544,7 @@ [lenny] - phpmyadmin <not-affected> (Vulnerable code not present) CVE-2011-2642 [PMASA-2011-9 XSS in table Print view.] RESERVED + {DSA-2286-1} - phpmyadmin 4:3.4.3.2-1 CVE-2011-XXXX [pyro: insecure use of temporary pid file] - pyro <unfixed> (low; bug #631912) @@ -886,16 +888,20 @@ CVE-2011-2509 RESERVED CVE-2011-2508 (Directory traversal vulnerability in libraries/display_tbl.lib.php in ...) + {DSA-2286-1} - phpmyadmin 4:3.4.3.1-1 [lenny] - phpmyadmin <not-affected> (Vulnerable code not present) CVE-2011-2507 (libraries/server_synchronize.lib.php in the Synchronize implementation ...) + {DSA-2286-1} - phpmyadmin 4:3.4.3.1-1 (unimportant) [lenny] - phpmyadmin <not-affected> (Vulnerable code not present) NOTE: neutralized by Suhosin patch CVE-2011-2506 (setup/lib/ConfigGenerator.class.php in phpMyAdmin 3.x before 3.3.10.2 ...) + {DSA-2286-1} - phpmyadmin 4:3.4.3.1-1 (low) [lenny] - phpmyadmin <not-affected> (Vulnerable code not present) CVE-2011-2505 (libraries/auth/swekey/swekey.auth.lib.php in the Swekey authentication ...) + {DSA-2286-1} - phpmyadmin 4:3.4.3.1-1 [lenny] - phpmyadmin <not-affected> (Vulnerable code not present) CVE-2011-2504